Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match in github.com/cilium/cilium
Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match in github.com/cilium/cilium
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-56743US | —OT elevated | — | ||
Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/cilium/cilium/commit/1c84ae3b58a7cd54f7ee355e6c524c82f620eae8FIX
- https://github.com/cilium/cilium/commit/bacea640404c0805c23515353dc1681c5bf35171FIX
- https://github.com/cilium/cilium/pull/46305FIX
- https://github.com/cilium/cilium/pull/46456FIX
- https://github.com/cilium/cilium/releases/tag/v1.19.5WEB
- https://github.com/cilium/cilium/security/advisories/GHSA-fm8w-2m5w-9j7rADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2026-56743ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan